t.Errorf("transcript incorrect: got %x, want %x", got, chacha8hash)
	}

	p.Seed(chacha8seed)
	h.Reset()

	buf = make([]byte, chacha8outlen)
	if _, err := io.ReadFull(iotest.OneByteReader(p), buf); err != nil {
		t.Errorf("one byte reads: %v", err)
	}
	h.Write(buf)
	if got := h.Sum(nil); !bytes.Equal(got, chacha8hash) {
		t.Errorf("transcript incorrect (one byte reads): got %x, want %x", got, chacha8hash)